full-disclosure - Administrivia: Poll

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <871080DEC5874D41B4E3AFC5C400611ECFCF66@UTDEVS02.campus.ad.utdallas.edu>
From: pauls at utdallas.edu (Schmehl, Paul L)
Subject: Administrivia: Poll

While I fully agree with your sentiments (articulated below) and I
personally am not having a problem with anyone's posts, I *do* think
that the *purpose* of this list is full *disclosure*, which refers to
the posting of and discussion of security vulnerabilities.  ISTM
therefore that anything *other* than that would be off topic for this
list.  While many lists that I subscribe to can divert into off topic
discussions, they are usually killed relatively quickly by a moderator.

My suggestion to Len et al would be to allow unmoderated discussion of
security vulnerabilities and security-related issues and to moderate
everything else.  I personally don't see the point in discussing various
cultural tendencies or the political possibilities of various countries.
This is, after all, an international list, and those discussions will
impact a small minority of the posters.

IOW, make the list what it was intended to be; full *disclosure*, not
full *discussion*.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/

-----Original Message-----
From: David Bernick [mailto:bernz@...nztech.org] 
Sent: Thursday, June 12, 2003 10:57 AM
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Administrivia: Poll

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anyone who has had the intellect to find and sign up for this list has
the intellect and ability to set up procmail filters or client side
filters or some other way to filter something. So someone harrasses the
list, so someone does stuff you don't like? Filter it. It's really that
simple. Moderating ANYONE is a really really bad idea on a
Full-Disclosure list.

I would think that any person really interested in security is signed up
to about 20 lists or so. Plenty have noise. You have to learn how to
filter it. Just like you do with the rest of your life.